https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:25:10.021414+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0958 certfr-2024-avi-0958 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T16:25:10.161920+00:00 certfr-2024-avi-0958 https://cve.radiocsirt.org/vuln/euvd-2026-244650 EUVD-2026-244650 2026-10-03T16:25:10.162002+00:00 EUVD-2026-244650 https://cve.radiocsirt.org/vuln/fkie_cve-2024-34447 fkie_cve-2024-34447 2026-10-03T16:25:10.162033+00:00

An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19. When endpoint identification is enabled in the BCJSSE and an SSL socket is created without an explicit hostname (as happens with HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP address in some situations, opening up a possibility of DNS poisoning.

 https://cve.radiocsirt.org/vuln/ghsa-4h8f-2wvx-gg5w GHSA-4h8f-2wvx-gg5w — Bouncy Castle Java Cryptography API vulnerable to DNS poisoning 2026-10-03T16:25:10.162087+00:00

Affected: Maven: org.bouncycastle:bcprov-jdk18on, Maven: org.bouncycastle:bcprov-jdk15to18, Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bcprov-jdk12, Maven: org.bouncycastle:bctls-fips, Maven: org.bouncycastle:bcprov-lts8on, Maven: org.bouncycastle:bcprov-jdk15on

An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19. When endpoint identification is enabled in the BCJSSE and an SSL socket is created without an explicit hostname (as happens with HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP address in some situations, opening up a possibility of DNS poisoning.

 https://cve.radiocsirt.org/vuln/rhsa-2024:4271 RHSA-2024:4271 — Red Hat Security Advisory: Red Hat AMQ Broker 7.12.1 release and security update 2026-10-03T16:25:10.162150+00:00

JSON-java: parser confusion leads to OOM org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) org.bouncycastle:bcprov-jdk18on: Infinite loop in ED25519 verification in the ScalarUtil class org.bouncycastle: Use of Incorrectly-Resolved Name or Reference

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-34447 UBUNTU-CVE-2024-34447 2026-10-03T16:25:10.162204+00:00

Affected: Ubuntu:Pro:20.04:LTS: bouncycastle, Ubuntu:Pro:22.04:LTS: bouncycastle, Ubuntu:Pro:24.04:LTS: bouncycastle

An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19. When endpoint identification is enabled in the BCJSSE and an SSL socket is created without an explicit hostname (as happens with HttpsURLConnection), hostname verification could be performed against a DNS-resolved IP address in some situations, opening up a possibility of DNS poisoning.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1031 WID-SEC-W-2024-1031 — Bouncy Castle: Mehrere Schwachstellen 2026-10-03T16:25:10.162257+00:00

Ein anonymer Angreifer kann mehrere Schwachstellen in Bouncy Castle ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder einen DNS-Poisoning-Angriff durchzuführen.